CVE-2024-33858: Logpoint Siem
Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.
An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment source. The source_name parameter could be changed to an absolute path; this will write the CSV file to that path inside the /tmp directory.
Affected products
- Logpoint Siem: before 7.4.0 (fixed in 7.4.0)
Published 2024-05-07. Last modified 2026-06-17.